Live workshop with Mattia at the #DFIRSummit teaching browsers artifacts from FOR500 and FOR585.
ATTN NERDS:
the SANS #DFIRSummit call for presentations is open! CFP closes 4/24 so go, go, go!
can't wait to see the submissions! π€
https://www.sans.org/u/1pkB
The #DFIRSummit is always a source of excellent talks. I miss in person events but free access to this content anywhere in the world is awesome.
Currently enjoying @megan_roddie's talk on 'Automating Google Workspace Incident Response' w/ bonus doodle from @MindsEyeCCF.
ATTN NERDS:
join me and @eric_capuano at the @DFIRSummit to hear about how we leverage open source tools to tackle IR at scale! π€π
#DFIRSummit
I had to switch to cycling from running due to injury, but that has seen me complete the second leg of #DFIRFitin2020 a lot quicker than expected, and during #DFIRSummit!
#DFIRFit
Thanks for triggering my Alexa just now @HeatherMahalik π€£#DFIRSummit
SANS #DFIRSUMMIT time!
Chillin with @MalwareJake at #DFIRSummit
I am a #LethalForensicstor #DFIRSummit
Time to roll to @sansforensics #DFIRSummit in ATX.
My +1 to #DFIRSummit #SANSPrague has had to pull out, as such if any of my contacts would like to take their spot let me know. You'll need to pay for travel and accom but entry will be covered.
I have just realised the #DFIRPrague #DFIRSummit will not only be the first #DFIRNetwars event I've seen in EMEA this year but their first time running #CoinSlayer.
So who else is headed to #SANSPrague #DFIRSummit in October?
Talk accepted at the #SANSPrague #DFIRSummit! Super excited to talk about exFAT's inconsistent implementation and interpretation between different OS and Forensics Tools.
Mentioned this in class today, still relevant to organizations fighting with malicious macros in Office documents (all of them?) blog.ecapuano.com/macro-security-for-enter... #dfirsummit #DFIR
Covering analysis of Windows Event Logs for tracking lateral movement -- reminds me of this older, but still relevant, PsExec deep-dive by @mikepilkington digital-forensics.sans.org/blog/2012/12/17/protecti... #DFIRSUMMIT #DFIR